Re: denial of service attack possible

[avalon () coombs anu edu au (Darren Reed)]

In some mail from Nathan Lawson, sie said:
[...]
> This doesn't address direct d.o.s. attacks, though.  I think that Solaris's
> tcp_eager_listeners option could be used to allow your application to process
> connection requests before the complete 3-way handshake.  Other than that,
> it's up to you whether you want to violate RFC's and perhaps break other things
> by dropping connection requests from the queue faster or limiting the number
> of requests from one machine.

I think that Linux also implements TCP in a similar way - I've seen and made
inetd on linux return half open connections that were closed before anything
got to run (tcp wrappers, etc).  Looks very strange in logs.

darren